home

uninstall.exe

360Amigo System SpeedUp

360Amigo Oy

The application uninstall.exe, “360Amigo System SpeedUp Installor” by 360Amigo Oy has been detected as a potentially unwanted program by 8 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program 360Amigo System Speedup PRO by 360Amigo System SpeedUp. This file is typically installed with the program 360Amigo System Speedup PRO by 360Amigo. The file has been seen being downloaded from software-files-a.cnet.com and multiple other hosts.
Publisher:
360Amigo  (signed by 360Amigo Oy)

Product:
360Amigo System SpeedUp

Description:
360Amigo System SpeedUp Installor

Version:
1.2.1.8200

MD5:
f1fc6a15e0512ee99d54f94d6ca2c6d9

SHA-1:
3eee200945a8c42bcc2347a28a675fb5e192ec8b

SHA-256:
3d7057c4bfc2322901dc49154ac3d7aa2fcf0d4afc6ec7b04f3d98f0c213694f

Scanner detections:
8 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 5:19:22 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Clod8bf.Trojan
1.3.0.4923

Comodo Security
UnclassifiedMalware
17670

Fortinet FortiGate
W32/AutoRun.EWQA!worm
1/25/2014

IKARUS anti.virus
Worm.Win32.AutoRun
t3scan.2.2.29

Kaspersky
Worm.Win32.AutoRun
14.0.0.4412

McAfee
Artemis!F1FC6A15E051
5600.7239

Reason Heuristics
PUP.Optional.Installer.360AmigoOy.J
14.3.4.0

Vba32 AntiVirus
Worm.AutoRun
3.12.24.3

File size:
9.7 MB (10,132,256 bytes)

Product version:
1.2.1

Copyright:
Copyright 2012 by 360Amigo

Trademarks:
360Amigo

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\360amigo\uninstall.exe

Digital Signature
Signed by:
360Amigo Oy

Authority:
VeriSign, Inc.

Valid from:
7/29/2012 3:00:00 AM

Valid to:
7/30/2013 2:59:59 AM

Subject:
CN=360Amigo Oy, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=360Amigo Oy, L=Helsinki, S=Helsinki, C=FI

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7369CB538B18E218534A606B0904BBA4

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:9prU6JsDqIMS+lZ2Q/uApRfIrs/TqP6Sbjo1qxCthefEYmiXhEmDvnp5tz86+Jxj:9dBKHabrt2UtwHmiXqmjps

Entry address:
0x12FF0C

Entry point:
55, 8B, EC, B9, 09, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, 57, B8, 1C, FB, 52, 00, E8, CB, 68, ED, FF, 33, C0, 55, 68, 40, 04, 53, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 72, FF, 52, 00, 64, FF, 32, 64, 89, 22, E8, 86, 5A, F6, FF, 83, F8, 05, 7F, 19, 8B, 0D, 9C, 45, 53, 00, 8B, 09, B2, 01, A1, 24, 7C, 40, 00, E8, E5, D2, ED, FF, E8, 90, 3C, ED, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 23, E9, C1, 3A, ED, FF, 01, 00, 00, 00, 24, 7C, 40, 00, 83, FF, 52, 00, 8B, 40, 04, E8, 45, 60, F6, FF, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.2 MB (1,242,624 bytes)

Program Uninstaller
Program name:
360Amigo System Speedup PRO

Display publisher:
360Amigo System SpeedUp

Display version:
1.2.1.8200

Uninstall string:
C:\Program files\360Amigo\Uninstall.exe /REMOVE


The file uninstall.exe has been discovered within the following program.

360Amigo System Speedup PRO  by 360Amigo
360Amigo System Speedup is a tool of Windows that works quickly in identifying the problem and fix it if there are some mistakes that result in slow system performance.
www.360amigo.com
56% remove it
 
Powered by Should I Remove It?

The file uninstall.exe has been seen being distributed by the following 2 URLs.

http://software-files-a.cnet.com/s/software/13/06/36/.../360amigoprosetup.exe

http://dl.element5.com/d/c48fd88d65feb92e/529CD25A/.../360amigoprosetup.exe

Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.